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WHAT IS CLAIMED IS: 

1 . A method comprising: 

determining a version of program code satisfying an operating policy; and 
denying a client access to a resource if a version of the program code on the 

client attempting to access the resource is different from the version of program 

code satisfying the operating policy. 

2. The method of claim 1, further comprising granting the client access 
to the resource when the version of program code on the client corresponds to the 
version of program code satisfying the operating policy. 

3. The method of claim 1, further comprising determining the version 
of program code on the client in response to requesting access to the resource on a 
network. 

4. The method of claim 1, further comprising determining the version 
of program code on the client during launch of the program code. 

5. The method of claim 1, further comprising writing the version of 
program code on the client to a cache and then reading the cache while the 
program code is loading. 
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6. The method of claim 1, further comprising updating the program 

2| 

code on the client when the version of the program code on the client is different 

3 

4 1 from the version of program code satisfying the operating policy. 

7. The method of claim 1, further comprising notifying a user at the 
client if the version of program code on the client is different from the version of 
program code satisfying the operating policy. 

8. The method of claim 1, further comprising notifying a network 
12 administrator if the version of program code on the client is different from the 

version of program code satisfying the operating policy. 
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9. The method of claim 1, further comprising recording in a log if the 

16 

17 version of program code on the client is different from the version of program 
is code satisfying the operating policy. 
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10. A method comprising: 

determining a version of program code satisfying an operating policy; and 
denying execution of program code on a client if a version of the program 
code on the client is different from the version of program code satisfying the 



5 operating policy. 
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1 1 . The method of claim 10, further comprising executing the program 
code on the client when the version of program code on the client corresponds to 
the version of program code satisfying the operating policy. 



12 12. The method of claim 10, further comprising determining the version 
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of program code on the client during launch of the program code. 

13. The method of claim 10, further comprising receiving the operating 
policy at the client. 

14. The method of claim 10, further comprising writing the version of 
program code on the client to a cache and then reading the cache while the 
program code is loading. 
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15. The method of claim 10, further comprising updating the program 
code on the client when the version of program code on the client is different from 
the version of program code satisfying the operating policy. 

16. The method of claim 10, further comprising notifying a user at the 
client if the version of program code on the client is different from the version of 
program code satisfying the operating policy. 

17. The method of claim 10, further comprising notifying a network 
administrator if the version of program code on the client is different from the 
version of program code satisfying the operating policy. 

18. The method of claim 10, further comprising recording in a log if the 
version of program code on the client is different from the version of program 
code satisfying the operating policy. 
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19. A system comprising: 
an operating policy; and 

a compliance module accessing the operating policy and denying a client 
access to a resource if a version of program code on the client attempting to access 
the resource is different from a version of program code satisfying the operating 
policy. 

20. The system of claim 19, wherein the resource is available via a host 
on a network. 

2 1 . The system of claim 19, further comprising a notification module, 
said notification module notifying at least one of a user, an administrator, and a log 
when the version of program code on the client is different from a version of 
program code satisfying the operating policy. 

22. The system of claim 19, wherein the operating policy includes at 
least one access control list (ACL). 

23. The system of claim 19, wherein the operating policy includes at 
least one access control entry (ACE). 
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24. A system comprising: 
an operating policy; and 

a compliance module accessing the operating policy and denying execution 
of program code on a client if a version of the program code on the client is 
different from the version of program code satisfying the operating policy, 

25. The system of claim 24, further comprising a security module 
authenticating the client in a network, the authenticated client receiving the 
operating policy. 

26. The system of claim 24, further comprising a notification module, 
said notification module notifying at least one of a user, an administrator, and a log 
when the version of program code on the client is different from a version of 
program code satisfying the operating policy. 

27. The system of claim 24, wherein the operating policy includes at 
least one access control list (ACL). 

28. The system of claim 24, wherein the operating policy includes at 
least one access control entry (ACE). 
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29. A computer program product encoding a computer program for 
executing on a computer system a computer process, the computer process 
comprising: 

determining a version of program code satisfying an operating policy; and 
denying a client access to a resource if a version of the program code on the 

client attempting to access the resource is different from the version of program 

code satisfying the operating policy. 

30. The computer program product of claim 29 wherein the computer 
process further comprises determining the version of program code on the client in 
response to requesting access to the resource on a network. 

3 1 . The computer program product of claim 29 wherein the computer 
process further comprises determining the version of program code on the client 
while the program code is loading. 

32. The computer program product of claim 29 wherein the computer 
process further comprises updating the program code on the client when the 
version of the program code on the client is different from the version of program 
code satisfying the operating policy. 
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33. A computer program product encoding a computer program for 
executing on a computer system a computer process, the computer process 
comprising: 

determining a version of program code satisfying an operating policy; and 
denying execution of program code on a client if a version of the program 

code on the client is different from the version of program code satisfying the 

operating policy. 

34. The computer program product of claim 33 wherein the computer 
process further comprises determining the version of program code on the client 
during launch of the program code. 

35. The computer program product of claim 33 wherein the computer 
process further comprises receiving the operating policy at the client. 

36. The computer program product of claim 33 wherein the computer 
process further comprises updating the program code on the client when the 
version of program code on the client is different from the version of program 
code satisfying the operating policy. 
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